Investigate System Interactions

Discover the Tools

ProcDOT

Visualize and examine the output of Process Monitor.

Website: https://www.procdot.com Author: Christian Wojner: https://x.com/Didelphodon License: Free, custom license: https://cert.at/media/files/downloads/software/procdot/files/license.txt Notes: procdot State File: remnux.packages.procdot

Find hidden processes on the local Linux system.

Website: https://github.com/sandflysecurity/sandfly-processdecloak Author: Sandfly Security: https://x.com/SandflySecurity License: MIT License: https://github.com/sandflysecurity/sandfly-processdecloak/blob/master/LICENSE State File: remnux.packages.sandfly-processdecloak

Find hidden processes or connections on the local Linux system.

Website: http://www.unhide-forensics.info Author: Yago Jesus: https://x.com/YJesus License: GNU General Public License (GPL) v3: https://www.gnu.org/licenses/gpl-3.0.html State File: remnux.packages.unhide

MCP server that lets AI assistants analyze Process Monitor (Procmon) XML captures.

Website: https://github.com/JameZUK/ProcmonMCP Author: James (JameZUK): https://x.com/JameZUK License: MIT License: https://github.com/JameZUK/ProcmonMCP/blob/procmon_parser/LICENSE Notes: Pre-configured for OpenCode as the "procmon" MCP server. On Windows, export the Procmon capture to XML (the native .PML format is not supported), copy the XML to REMnux, then ask the assistant to load it. Large captures with millions of events can take several minutes to load. State File: remnux.tools.procmon-mcp

Last updated 3 months ago